WindsurfIDE

Hanko (Passkey Auth) MCP Server

Bring Authentication
to Windsurf

Name: Hanko (Passkey Auth) MCP Server
Price: 29 USD
Availability: InStock
Rating: 5.0 (1 reviews)
Author: Vinkius

Learn how to connect Hanko (Passkey Auth) to Windsurf and start using 15 AI agent tools in minutes. Fully managed, enterprise secure, and ready to use without writing a single line of code.

GDPR Free for Subscribers

Admin Create UserAdmin Get UserAdmin List User CredentialsAdmin List UsersFlow ExecutePasskey Delete CredentialPasskey List CredentialsPasskey Login FinalizePasskey Login InitPasskey Registration FinalizePasskey Registration InitPasskey Transaction FinalizePasskey Transaction InitPublic Get JwksPublic Validate Session

Unlock for AI Agents

Ask AI about this MCP Server ChatGPT Claude Perplexity

Compatible with every major AI agent and IDE

Claude

ChatGPT

Cursor

Gemini

Windsurf

VS Code

JetBrains

Vercel

+ other MCP clients

What is the Hanko (Passkey Auth) MCP Server?

Connect your Hanko instance to any AI agent to streamline passkey-based authentication and user management. This server provides a comprehensive interface for WebAuthn flows and administrative user operations.

What you can do

Passkey Lifecycle — Initialize and finalize WebAuthn registration and login flows for secure, passwordless access.
Credential Management — List and delete registered WebAuthn credentials for specific users.
User Administration — Create, retrieve, and list users and their associated credentials via admin tools.
Transaction Security — Initialize and finalize passkey-signed transactions for sensitive operations like payments.
Session Validation — Publicly validate sessions and retrieve JWKS for token verification.

How it works

Subscribe to this server
Enter your Hanko Tenant ID and API Key
Start managing identity flows from your MCP-compatible client

Who is this for?

Developers — quickly test and debug WebAuthn registration and login flows without manual API calls.
Security Engineers — audit user credentials and manage identity access policies through a conversational interface.
Product Teams — simulate and verify user onboarding and transaction signing workflows.

Built-in capabilities (15)

admin_create_user

Create a new user via Admin API

admin_get_user

Get a user by ID via Admin API

admin_list_user_credentials

List WebAuthn credentials for a user via Admin API

admin_list_users

List users via Admin API

flow_execute

Execute a Hanko Flow action

passkey_delete_credential

Delete a WebAuthn credential

passkey_list_credentials

List WebAuthn credentials for a user

passkey_login_finalize

Finalize a passkey login

passkey_login_init

Returns publicKey options for navigator.credentials.get(). Initialize a passkey login

passkey_registration_finalize

Finalize a passkey registration

passkey_registration_init

Returns publicKey options for navigator.credentials.create(). Initialize a passkey registration

passkey_transaction_finalize

Finalize a passkey transaction

passkey_transaction_init

g., payment confirmation) for an existing user. Initialize a passkey transaction

public_get_jwks

Get JSON Web Key Set (JWKS)

public_validate_session

Validate a Hanko session token

Why Windsurf?

Windsurf's Cascade agent chains multiple Hanko (Passkey Auth) tool calls autonomously. query data, analyze results, and generate code in a single agentic session. Paste Vinkius Edge URL, reload, and all 15 tools are immediately available. Real-time tool feedback appears inline, so you see API responses directly in your editor.

—
Windsurf's Cascade agent autonomously chains multiple tool calls in sequence, solving complex multi-step tasks without manual intervention
—
Purpose-built for agentic workflows. Cascade understands context across your entire codebase and integrates MCP tools natively
—
JSON-based configuration means zero code changes: paste a URL, reload, and all 15 tools are immediately available
—
Real-time tool feedback is displayed inline, so you see API responses directly in your editor without switching contexts

See it in action

Hanko (Passkey Auth) in Windsurf

AI Agent→Vinkius

High Security·Kill Switch·Plug and Play

Why Vinkius

Hanko (Passkey Auth) and 4,000+ other MCP servers. One platform. One governance layer.

Teams that connect Hanko (Passkey Auth) to Windsurf through Vinkius don't need to source, host, or maintain individual MCP servers. Every tool call runs inside a hardened runtime with credential isolation, DLP, and a signed audit chain.

4,000+MCP Servers ready

<40msCold start

60%Token savings

	Raw MCP	Vinkius
Server catalog	Find and host yourself	4,000+ managed
Infrastructure	Self-hosted	Sandboxed V8 isolates
Credential handling	Plaintext in config	Vault + runtime injection
Data loss prevention	None	Configurable DLP policies
Kill switch	None	Global instant shutdown
Financial circuit breakers	None	Per-server limits + alerts
Audit trail	None	Ed25519 signed logs
SIEM log streaming	None	Splunk, Datadog, Webhook
Honeytokens	None	Canary alerts on leak
Custom domains	Not applicable	DNS challenge verified
GDPR compliance	Manual effort	Automated purge + export

Unlock for AI Agents View step-by-step setup guide for Windsurf →

Enterprise Security

Why teams choose Vinkius for Hanko (Passkey Auth) in Windsurf

The Hanko (Passkey Auth) MCP Server runs on Vinkius-managed infrastructure inside AWS — a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts. All 15 tools execute in hardened sandboxes optimized for native MCP execution.

Your AI agents in Windsurf only access the data you authorize, with DLP that blocks sensitive information from ever reaching the model, kill switch for instant shutdown, and up to 60% token savings. Enterprise-grade infrastructure, zero maintenance.

Unlock for AI Agents View full Hanko (Passkey Auth) details →

Fully ManagedVinkius Servers

60%Token savings

High SecurityEnterprise-grade

IAMAccess control

EU AI ActCompliant

DLPData protection

V8 IsolateSandboxed

Ed25519Audit chain

<40msKill switch

Stream every event to Splunk, Datadog, or your own webhook in real-time

* Every MCP server runs on Vinkius-managed infrastructure inside AWS - a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts optimized for native MCP execution. See our infrastructure

The Vinkius Advantage

How Vinkius secures
Hanko (Passkey Auth) for Windsurf

Every tool call from Windsurf to the Hanko (Passkey Auth) MCP Server is protected by DLP redaction, cryptographic audit chains, V8 sandbox isolation, kill switch, and financial circuit breakers.

< 40msCold start

Ed25519Signed audit chain

60%Token savings

FAQ

Frequently asked questions

How do I start a new passkey registration for a user?

Use the passkey_registration_init tool with the user's ID and username. This will return the necessary WebAuthn options to be used on the client side.

Can I view all WebAuthn credentials associated with a specific user?

Yes, you can use the passkey_list_credentials tool (or admin_list_user_credentials for admin access) to retrieve a list of all registered passkeys for any user ID.

Is it possible to create a user directly through the AI agent?

Absolutely. Use the admin_create_user tool to provision a new user in your Hanko project by providing a unique user ID.

How does Windsurf discover MCP tools?

Windsurf reads the mcp_config.json file on startup and connects to each configured server via Streamable HTTP. Tools are listed in the MCP panel and available to Cascade automatically.

Can Cascade chain multiple MCP tool calls?

Yes. Cascade is an agentic system. it can plan and execute multi-step workflows, calling several tools in sequence to accomplish complex tasks without manual prompting between steps.

Does Windsurf support multiple MCP servers?

Yes. Add as many servers as needed in mcp_config.json. Each server's tools appear in the MCP panel and Cascade can use tools from different servers in a single flow.